diff --git a/app/controllers/posts_controller.rb b/app/controllers/posts_controller.rb
index 722ef96a8..a469130a8 100644
--- a/app/controllers/posts_controller.rb
+++ b/app/controllers/posts_controller.rb
@@ -11,7 +11,7 @@ class PostsController < ApplicationController
     else
       tag_query = params[:tags] || params.dig(:post, :tags)
       @post_set = PostSets::Post.new(tag_query, params[:page], params[:limit], raw: params[:raw], random: params[:random], format: params[:format])
-      @posts = authorize @post_set.posts
+      @posts = authorize @post_set.posts, policy_class: PostPolicy
       respond_with(@posts) do |format|
         format.atom
       end
diff --git a/test/functional/posts_controller_test.rb b/test/functional/posts_controller_test.rb
index 5ff04d3e6..be346c32a 100644
--- a/test/functional/posts_controller_test.rb
+++ b/test/functional/posts_controller_test.rb
@@ -105,6 +105,13 @@ class PostsControllerTest < ActionDispatch::IntegrationTest
           get posts_path(format: :json), params: { random: "1" }
           assert_response :success
         end
+
+        should "render with multiple posts" do
+          @posts = create_list(:post, 2)
+
+          get posts_path, params: { random: "1" }
+          assert_response :success
+        end
       end
 
       context "with the .atom format" do